Route Origin Authorization

$ rpki-client -vvvf rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E1D3F369D5211F1ABDC3ACBCE1D38B0.roa
File:                     4E1D3F369D5211F1ABDC3ACBCE1D38B0.roa (raw, json)
Hash identifier:          mPJJWe6ZvueGsCjg/csGygfoDGI6dctEZZRFE+r8Pt8=
Subject key identifier:   E7:27:06:32:A7:E1:E0:27:68:44:88:97:6A:FF:12:B9:4D:9D:77:F4
Certificate issuer:       /CN=F368F2D0AR/serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
Certificate serial:       01CFBC
Authority key identifier: 79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B
Authority info access:    rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
Subject info access:      rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E1D3F369D5211F1ABDC3ACBCE1D38B0.roa
Signing time:             Fri 21 Aug 2026 11:20:25 +0000
ROA not before:           Fri 21 Aug 2026 11:20:21 +0000
ROA not after:            Tue 29 Sep 2026 11:20:21 +0000
asID:                     44559
IP address blocks:        45.199.240.0/24 maxlen: 24
                          45.199.246.0/24 maxlen: 24
                          45.199.247.0/24 maxlen: 24
                          45.199.248.0/24 maxlen: 24
                          45.199.251.0/24 maxlen: 24
                          45.199.253.0/24 maxlen: 24
                          45.199.254.0/24 maxlen: 24
                          45.200.179.0/24 maxlen: 24
                          45.200.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl
                          rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.mft
                          rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.crl
                          rsync://rpki.afrinic.net/repository/arin/uHxadfPZV0E6uZhkaUbUVB1RFFU.mft
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/arin-to-afrinic.cer
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
                          rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
                          rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires:   Wed 02 Sep 2026 11:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118716 (0x1cfbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F368F2D0AR, serialNumber=797D88D813E20FFF982CC7419E969BAEA6BFD69B
        Validity
            Not Before: Aug 21 11:20:21 2026 GMT
            Not After : Sep 29 11:20:21 2026 GMT
        Subject: CN=6a883479-c027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:1e:ae:32:c0:e5:a0:e0:72:44:7d:5c:9b:5b:
                    af:68:d6:fb:22:39:e7:62:31:55:2d:72:37:56:e2:
                    dc:42:c7:e2:e6:30:99:f3:ce:49:53:4b:b0:29:01:
                    76:54:a6:21:45:44:a8:91:f6:0a:40:1e:47:f6:38:
                    02:f9:5c:b4:b2:cc:b9:79:ee:d2:1b:b1:03:d6:7e:
                    7e:8d:42:08:21:d5:db:66:69:3d:ba:1c:e5:e3:b6:
                    53:39:90:b6:ce:84:28:ff:e4:ef:4e:ac:b0:9f:46:
                    f2:95:f3:af:4c:f9:1a:d2:c2:46:ad:70:7a:fd:15:
                    7f:5c:91:fe:41:63:14:d9:8b:c0:69:f2:88:12:07:
                    3f:39:42:a6:79:52:e6:03:34:7d:c7:26:a6:91:2a:
                    40:84:a3:7f:58:5c:0b:26:14:e8:a3:8f:15:18:3a:
                    86:3e:3a:31:5a:08:b8:b4:51:3e:01:22:64:fc:8b:
                    43:aa:ca:17:e2:2f:a9:3f:30:5f:30:83:45:b6:b9:
                    eb:c4:87:40:b8:85:77:be:bb:ec:c2:a1:22:76:89:
                    3e:6d:69:19:63:1b:73:40:bf:68:59:92:76:71:de:
                    33:0b:9e:04:5f:2c:e4:ff:aa:61:68:3f:46:ff:1b:
                    23:14:c0:fa:98:f6:82:24:fd:af:c2:08:60:80:12:
                    95:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:27:06:32:A7:E1:E0:27:68:44:88:97:6A:FF:12:B9:4D:9D:77:F4
            X509v3 Authority Key Identifier:
                keyid:79:7D:88:D8:13:E2:0F:FF:98:2C:C7:41:9E:96:9B:AE:A6:BF:D6:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/eX2I2BPiD_-YLMdBnpabrqa_1ps.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/arin/eX2I2BPiD_-YLMdBnpabrqa_1ps.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/92F86E1C6E0511E8A1B5854BF8AEA228/4E1D3F369D5211F1ABDC3ACBCE1D38B0.roa
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.199.240.0/24
                  45.199.246.0-45.199.248.255
                  45.199.251.0/24
                  45.199.253.0-45.199.254.255
                  45.200.179.0-45.200.180.255

    Signature Algorithm: sha256WithRSAEncryption
         2c:49:e2:04:52:40:53:c9:ee:3a:7b:60:18:12:d9:ec:70:5b:
         37:46:6f:e6:28:82:d2:1d:1f:30:01:40:40:74:10:eb:10:4c:
         72:35:dd:3f:4c:08:86:ed:f2:be:2f:77:d1:4b:ea:17:d5:8e:
         db:92:ff:dc:bd:54:2c:f3:31:56:4e:f2:13:69:38:73:a0:dd:
         87:1e:47:be:ae:9e:6b:d9:b1:fc:b0:9c:7b:2f:d7:7b:6c:8d:
         78:7e:d5:f4:11:7b:0a:59:a3:28:e5:0f:3d:8a:c7:2c:02:a5:
         22:01:49:d1:57:e5:e4:c7:2f:66:31:c2:9c:ff:68:53:34:1a:
         5b:55:f5:3a:0b:95:d0:ad:ea:ba:ec:c0:be:13:ae:ed:1c:6e:
         aa:6c:58:9d:ba:3b:9e:21:b1:3f:6b:e1:ff:27:32:11:ee:b8:
         da:f2:6d:b2:f5:d7:75:59:4b:42:83:2a:33:63:12:fa:41:6d:
         77:a8:3e:43:2d:83:07:ae:70:69:99:e3:59:6e:ef:53:99:34:
         f2:3e:cb:ba:cb:3c:93:87:d5:f8:f5:14:cf:91:ae:85:89:2e:
         60:4d:b3:1d:c2:8d:a4:50:27:bf:eb:6d:59:43:5c:1d:01:8e:
         15:f3:ed:0b:8d:18:4b:86:00:3f:db:fd:f1:92:e9:d7:0b:7d:
         66:e2:aa:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----